facebook-alert[.]onrender[.]com

The domain facebook-alert.onrender.com is currently listed as an active generic phishing site. Infrastructure analysis shows the domain resolves to the IPv4 address 216.24.57.7, which is hosted by Render Services Inc. The registrar entry confirms registration through the same provider, and the nameserver configuration could not be retrieved (NS_NOT_FOUND). Multiple threat intelligence feeds have flagged the domain: PhishDestroy and OpenPhish have placed it on their blocklists, and Google Safe Browsing categorises it under social engineering.

VirusTotal reports that 21 of 91 scanned security engines have issued a detection for the domain, indicating a significant consensus of malicious behavior. The domain also appears on two additional security blocklists, reinforcing its reputation as a high‑risk indicator. No public information about SSL certificates, HTTP response codes, or page title is available at this time, and the lack of a resolved nameserver limits deeper DNS‑level investigation.

Based on the aggregated evidence, the domain should be treated as a confirmed phishing infrastructure targeting users who may be misled by the facebook‑alert sub‑domain. Defenders are advised to add the domain and its resolved IP address to network deny lists, ensure that email gateways block URLs matching the pattern, and monitor for any outbound connections to the hosting provider's network. Continuous re‑evaluation is recommended, as the threat actor may alter hosting or employ additional sub‑domains in future campaigns.